Reviewing system events
Review events in the Management Console on the Events page.
On the events page, you can follow up on events in your system and get information about the event type and the user who initiated the event.
| Property | Description |
|---|---|
| Date | Date and time in UTC format. |
| Source | Source of the event information. |
| Event type | Type of event. See examples. |
| User | User initiating the event. If the user name cannot be displayed, the user ID is displayed instead. |
| Right arrow | Click the arrow to the far right to display additional information from the source or event. |
In the table, sort by using the arrows in the properties header and filter by using the funnel. Use buttons for refreshing and resetting after filtering.
Examples of sources:
- com.qlik/licenses
- com.qlik/engine
- com.qlik/edge-auth
Examples of events:
- app.created
- user-session.begin
- assignment.added
- assignment.revoked
How to retrieve archived events using the audit API
In this example, Postman is used to retrieve events that have been archived.
Preparation
Before you send the request, ensure that you have the following:
- the URL for the Qlik Sense cluster.
-
the API key that is required to make authorized requests to the API, see Managing API keys.
Retrieving the archived events
Do the following:
- Start Postman.
-
Set the HTTP method to GET.
-
Enter the following path in the URL area, including the date parameter to filter the archived events:
{url}/api/v1/audits/archive?date=yyyy-mm-dd
The full URL should look something like:
https://abc.us.example.com/api/v1/audits/archive?date=2019-11-16
-
Select Authorization. In the Type drop-down list, select Bearer Token. Enter the API key in the Token field
-
Click Send.
The JSON response from the API should look something like this:
{ "data": [ { "source": "com.qlik/edge-auth", "contentType": "application/json", "eventType": "com.qlik.user-session.begin", "eventId": "ykaaY1j2yZvClvwN6pmbO_3tjZeoVoBb", "eventTime": "2019-11-16T17:29:50.273Z", "tenantId": "bOowHi6pxn0GaUcXIna4oFco62ag9uoH", "userId": "fSuVsk3HjaeBeiSoyNWdbwH6zwr4T-Jq", "data": { "subject": "okta\\00ukoxpallpY4QRs70x7" } }, { … } ] }